Responsibilities:
- Manage the scoping, containment, remediation, reporting, and root cause analysis for Security Incidents within the customer infrastructure
- Provide guidance on control implementation for post-incident risk reduction
- Support Use Case development cycle
- SOC level 3 Investigation and Follow-up of threats / events / incidents escalated from the Security Operations Center: Tier 1 & 2.
- Contribute to the process managed by SOC including security incidents management, threat management
- Analysis of the security incidents: advise on corrective measures to implement in order to resolve IT incidents compromising the security.
- Support threat hunting process
- Acting as team leader for security operation center
Qualifications and needed criteria:
- At least 5 years of experience in well-established SOC environment
- Experience in incident response & forensics investigation
- Strong background in formulation and execution of threat hunt scenarios and the development of subsequent use cases to uplift detection capability
- Proven track record of successfully identifying, analyzing, and responding to security incidents
- In-depth knowledge of security solutions SIEM,SOAR, IDS/IPS, email security, vulnerability scanners and other security technologies.
